0e798515a2ac049ded4b1e6d8a2ae6e1_JaffaCakes118 | Triage

Sharing

General

Target

0e798515a2ac049ded4b1e6d8a2ae6e1_JaffaCakes118
Size

44KB
MD5

0e798515a2ac049ded4b1e6d8a2ae6e1
SHA1

7c93a2be3ab4467ba13746eb3a0f451aef5f2aae
SHA256

77e532bd055fe11c8ac5e573aeaa36d809b065a5e305aad973f0733fe19b576c
SHA512

28a9738ad43789664150c17c82b1d934b358101d263f4a4bd1ddc4700059264ef67a77d6d13ec8fc8526db18fcc0f22e0a776d4f0c0e14a4dd6d4922af0c6b88
SSDEEP

768:bXxBgJU64BPqNW7AfKfduWc8VFst2SX5IsM1Uh6aYFt1dlAEqXXAHKsKJu7ExOD:bHyWRF/cAst2SX5WUh83AV2gY+OD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Label_Copy_UPS.exe

Files

0e798515a2ac049ded4b1e6d8a2ae6e1_JaffaCakes118
.zip
Label_Copy_UPS.exe
.exe windows:5 windows x86 arch:x86

9e8b9e40a2157a8f0133dcb6619df20b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DialogBoxParamA
SetDlgItemTextA
GetActiveWindow
EnumWindows
EnumDisplaySettingsA
MessageBoxA
SetWindowTextA
IsCharAlphaA

ole32

CoGetCallerTID

comctl32

InitCommonControlsEx

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

kernel32

SetFileAttributesA
GetLocalTime
IsValidLanguageGroup
GetTickCount
IsValidLocale
GetDateFormatA
GetTimeFormatA
DeleteCriticalSection
InitializeCriticalSection
HeapDestroy
GetProcAddress
FreeLibrary
LoadLibraryA
LocalFree
GetStartupInfoA
HeapAlloc
ExitProcess
HeapCreate
IsBadReadPtr
LocalAlloc

Sections

.text
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ